Re: Multiple certificate option SNI

2019-09-13 Thread Heiko Schlittermann via dovecot
Maciej Milaszewski IQ PL via dovecot (Fr 13 Sep 2019 12:10:39 CEST): > openssl s_client -connect imap.mail.test.domain.com:993 -tls1_1 Use -servername for testing. -- Heiko signature.asc Description: PGP signature

Re: Multiple certificate option SNI

2019-09-13 Thread Jean-Daniel Dupas via dovecot
> Le 13 sept. 2019 à 12:10, Maciej Milaszewski IQ PL via dovecot > a écrit : > > Hi > I have some problem with SNI and dovecot 2.2.36.4 > > Server debian 9.x ad dovecot-2.2.36.4 > > default server ssl cert is a wildcard like *.domain.com (digicert) > > ssl_ca = /var/control/cert.pem > ssl_

Multiple certificate option SNI

2019-09-13 Thread Maciej Milaszewski IQ PL via dovecot
Hi I have some problem with SNI and dovecot 2.2.36.4 Server debian 9.x ad dovecot-2.2.36.4 default server ssl cert is a wildcard like *.domain.com (digicert) ssl_ca = /var/control/cert.pem ssl_cert = https://wiki.dovecot.org/SSL/DovecotConfiguration like: local_name imap.mail.test.domain.com {

Re: Multiple certificate option

2019-09-10 Thread Greg Wildman via dovecot
On Tue, 2019-09-10 at 08:41 +0200, Maciej Milaszewski IQ PL via dovecot wrote: > Hi > This is for all dovecot version ? Not sure. Any version of dovecot that builds it's config from the conf.d folder will work. Not sure on the specific SSL certificate syntax but I have been using the aformentioned

Re: Multiple certificate option

2019-09-09 Thread Maciej Milaszewski IQ PL via dovecot
Hi This is for all dovecot version ? On 10.09.2019 08:05, Greg Wildman via dovecot wrote: > On Fri, 2019-09-06 at 17:25 -0700, remo--- via dovecot wrote: >> What is the best way to adopt multiple certs? > I have a setup that creates letsencrypt certs for each customer domain. > To automate this I

Re: Multiple certificate option

2019-09-09 Thread Greg Wildman via dovecot
On Fri, 2019-09-06 at 17:25 -0700, remo--- via dovecot wrote: > What is the best way to adopt multiple certs? I have a setup that creates letsencrypt certs for each customer domain. To automate this I have the following at the end of conf.d/10-ssl.conf !include ssl.d/*.conf This includes any

Re: Multiple certificate option

2019-09-09 Thread Joseph Tam via dovecot
On Sat, 7 Sep 2019, Remo Mattei wrote: Thanks Michael I will check with the free cert lets encrypt to test it. If all your certificate subjects are domains under your control, such as when they are aliases of each other (e.g. smtp.domain.tld, pop3.domain.tld, imap.domain.tld, webmail.myotherdo

Re: Multiple certificate option

2019-09-07 Thread Remo Mattei via dovecot
Thanks Michael I will check with the free cert lets encrypt to test it. Remo > Il giorno 7 set 2019, alle ore 02:09, Michael Hallager via dovecot > ha scritto: > > On 2019-09-07 12:25, remo--- via dovecot wrote: >> What is the best way to adopt multiple certs? >> Thanks. > > /etc/dovecot/co

Re: Multiple certificate option

2019-09-07 Thread Michael Hallager via dovecot
On 2019-09-07 12:25, remo--- via dovecot wrote: What is the best way to adopt multiple certs? Thanks. /etc/dovecot/conf.d/10-ssl.conf Primary SSL certificate: # SSL/TLS support: yes, no, required. #ssl = yes ssl = required ("yes" or "required" - I use required) # Minimum SSL protocol vers

Multiple certificate option

2019-09-06 Thread remo--- via dovecot
What is the best way to adopt multiple certs? Thanks.